[RADIATOR] Client-Identifier doesn't match handler for Tacacs requests

Alexander Hartmaier alexander.hartmaier at t-systems.at
Tue Nov 24 08:25:02 CST 2009


Hi!

I've configured Radiator according to 5.5.16 Identifier in the 4.4.1
manual:

<Client DEFAULT>
        Identifier ouridentifier
        TACACSPLUSKey oursecret
        DupInterval 60
</Client>

But this handler doesn't match:

<Handler Client-Identifier=outidentifier, Service-Type=Login-User>

The fake radius packet looks like this:

Attributes:
        NAS-IP-Address = 10.1.2.3
        NAS-Port-Id = "tty322"
        Calling-Station-Id = "1.2.3.4"
        Service-Type = Login-User
        User-Name = "username"
        User-Password = **obscured**
        OSC-Version-Identifier = "192"

In ServerTACACSPLUS line 547 it seems this should work:

$tp->{Client} = $self; # So you can use Client-Identifier check items

Is this a bug or are I'm doing something wrong?

--
Alexander Hartmaier <alexander.hartmaier at t-systems.at>
T-Systems Austria GesmbH



*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*
T-Systems Austria GesmbH   Rennweg 97-99, 1030 Wien
Handelsgericht Wien, FN 79340b
*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*
Notice: This e-mail contains information that is confidential and may be privileged.
If you are not the intended recipient, please notify the sender and then
delete this e-mail immediately.
*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*


More information about the radiator mailing list